Drive Mode Privacy Policy

This policy explains what data we process, what for and who we share it with when you use drive mode («Drive with us») of the Viaje Rentable Android app (com.viajerentable.app) to take trips that passengers request from the Viaje Rentable Pasajeros app.

It does not cover the profitability tool in the same app, which has its own privacy policy, or the passenger app, which has its own. Drive mode uses nothing the tool reads from other apps.

Data controller: Viaje Rentable, the trade name of its sole owner, CUIT 23-39066620-9, Irala 106, Ciudad Autónoma de Buenos Aires, Argentina. Email: contacto@viajerentable.com.ar.

Data you give us:

• Account: your email address and a user identifier, because you sign in with your Google account. It is the same account as in the profitability tool and in Viaje Rentable Pasajeros.
• Identity verification: photos of your driving licence and a selfie with a liveness check, processed by Didit (which also records your device's IP address).
• Profile photo: a photo of your face that you take with the app.
• Vehicle and documents: your vehicle's plate, make, model, year, colour and category, and its registration card (cédula verde or azul), your professional driving licence, your criminal record certificate, the vehicle inspection (VTV) and the insurance.
• Face check when you go online: images of your face, which are biometric data (see Annex I).
• Content: your chat messages with the passenger, the ratings and comments you leave, your reports and SOS alerts, your answers to safety checks and what you write to support.
• People who follow you: if you invite someone to follow you, we keep only the notification subscription their browser creates.

Data created when you use drive mode:

• Location: your phone's precise location, only while you are online or have an open trip, with a visible notification; the app does not ask for background location permission. Outside a trip we keep only your latest location, with no history; during a trip, the route.
• Trips: the pickup, stops and destination, the times, the fare, the category, the agreed payment method, whether you confirmed the payment, and cancellations.
• Activity: when you go online and offline, and the results of your face checks.
• Device and usage: an identifier of the app installation, the identifier used to send you notifications, and app usage statistics and crash reports.

Data from other sources:

• Didit: the result of your identity verification and, if it was approved, your first and last name, your DNI number and your licence classes and expiry date.
• Passengers: the ratings, comments and reports they make about you.
• Public bodies: the answer of the Registro Nacional de Reincidencia (the Argentine criminal records registry) when we check your certificate on its public service.

We use your data to:

• Provide the service: enable you as a driver, know whether you are in an area where you can work, offer you trips, show the passenger who is picking them up and where you are, calculate the fare and keep your history.
• Safety and fraud prevention: verify your identity and your documents, check that the person going online is you and prevent someone else from using your account, run checks during trips, handle SOS alerts and review reports.
• Communication: the chat with the passenger during the trip and the alerts to the people who follow you.
• Support: answer your questions and resolve claims about a trip.
• Improve the service: analyse how the app is used and where it fails, and produce anonymous statistics, such as traffic data, that do not identify you.
• Service notices: notify you of trip offers, chat messages, safety checks and the status of your trips.
• Legal duties and claims: comply with the law, answer requests from competent authorities and defend our rights or those of others.

Some of this processing is automated, such as offering you trips, calculating the fare, helping review your documents, comparing your face when you go online and detecting risky situations during a trip. Depending on the result, we may ask you for another check or limit your access while a person on our team reviews it. Approving or rejecting your documents and your profile photo is always decided by a person. If you disagree with an automated decision, you can ask for a person to review it by writing to contacto@viajerentable.com.ar.

We process your data with your consent and, where Ley 25.326 allows it without consent, because it is necessary to provide the service you asked for or to comply with a legal duty.

For biometric data (your identity verification, your profile photo and the face check when you go online) we ask in the app for a separate, express consent. You give us the criminal record certificate yourself, because it is one of the requirements to receive trips.

We do not sell your data. We share it only in these cases:

• With the passenger of your trip: your name, your approved profile photo, your rating, how many trips you have made, whether you are verified, your vehicle with its plate, and your location while the trip lasts. They never see your documents.
• With the people who follow you, if you invite them: your first name, your approved photo, your vehicle, whether you are online or on a trip, your location while you are online, your trips of the day and, if you press the SOS button, the alert. During a trip they see the pickup, the destination and the route on the map, but never the passenger's name or the fare.
• With the apps you choose: if you open a trip in Google Maps or Waze, that app receives the place.
• With providers that give us server, network, identity verification, sign-in, notification and statistics services, only to provide them (Section 7); with the notification services of your followers' browsers; and with the Registro Nacional de Reincidencia, to check your certificate.
• With authorities: when a law or a competent authority requires it, or to defend rights in a claim.

Some of our providers process your data outside Argentina:

• DonWeb (Brazil): the virtual private server where our server runs, which stores and processes the data described in this policy.
• Cloudflare (United States, with data centres in many countries): protects and routes traffic to our server and stores its backups.
• Didit (European Union): identity verification.
• Google (United States and other countries): sign-in, notifications, and app usage statistics and crash reports (Firebase).

We transfer to each one only what it needs for the service it gives us. The face comparison of the check when you go online is done by our own server: those images are not sent to other providers.

We keep your account, your identity verification, your profile photo, your vehicles and documents, your trips, your ratings and the results of your face checks and the rest of the data in this policy as long as you have the account, except the following, which have their own period:

• Your trip routes and the data of their safety checks: 90 days after the trip ends.
• Chat messages: 90 days after the last message.
• Images of a doubtful face check: up to 30 days.
• Open cases: what is part of an SOS alert, a report or a claim, including the trip's route and messages, while the case is open and, afterwards, for the time needed to handle any claims about it.
• Backups: each copy of the database is kept for up to 30 days.
• Record of who viewed your documents and photos: it does not contain the documents or the photos. We keep it after you close your account too, as proof that we meet the security and confidentiality duty of Ley 25.326 (section 9), only as long as that duty requires.
• Images of your identity verification: Didit keeps them; when you close your account we ask Didit to delete them.

When you ask to close your account we block it at once and delete your data within 5 business days, except what Ley 25.326 (section 16) allows us to keep: data a rule requires us to keep and data that is part of an open case, only for as long as needed. The procedure is in Account deletion.

You can ask us for access to your personal data and for its rectification, update or deletion (Argentine Law 25.326, sections 14 to 16) by writing to contacto@viajerentable.com.ar from the email address you signed in with. You can also withdraw a consent you gave us; without it you may not be able to use the feature that needs it.

If you withdraw your consent to the identity verification or to the face check, you will not be able to go online, because they are requirements to receive trips.

To close your account, follow the Account deletion procedure.

The owner of personal data has the right to access it free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in section 14, subsection 3 of Law No. 25.326.

The Agencia de Acceso a la Información Pública (AAIP, the Argentine Agency for Access to Public Information), as the supervisory authority of Law No. 25.326, has the power to handle the complaints and claims filed by anyone whose rights are affected by a breach of the rules in force on personal data protection.

Drive mode uses these Android permissions:

• ACCESS_FINE_LOCATION Your precise location while you are online or on a trip. Android asks for it together with the approximate location (ACCESS_COARSE_LOCATION).
• FOREGROUND_SERVICE_LOCATION The service with a visible notification that sends your location during your shift, even while you use another app.
• CAMERA Identity verification, the face check when you go online, the profile photo and the photos of your documents.
• SYSTEM_ALERT_WINDOW Showing a bubble over other apps while you are online, and trip offers.
• POST_NOTIFICATIONS Notices of offers, chat, safety and your shift.
• RECORD_AUDIO Included by Didit's identity verification component. Viaje Rentable does not record audio.
• INTERNET Communicating with our server.

You can revoke them in Android settings. Without location or camera you will not be able to go online.

We protect your data with technical and organisational measures: connections to our server are encrypted, only the people on our team who need it for their work have access, and we record who views your documents and photos. If a security incident affects your data, we act to contain it and notify you when appropriate.

Drive mode is only for people aged 18 or over, or the higher age that the rules of your jurisdiction require. We do not knowingly collect data from minors.

We may update this policy, for example if the service or the law changes. When we do, we change the «Last updated» date and, if the change affects how we process your data, we tell you in the app before it applies. If what you consented to changes, we ask for your consent again.

If you have questions about this policy or your data, write to us at contacto@viajerentable.com.ar.

The face check has a single purpose: to confirm that the person going online and driving is the account holder, and not someone else or a photo. This annex is part of the policy.

• When: we ask for it when you go online, as often as we consider necessary to protect your account and the safety of passengers.
• Consent: comparing your face means processing biometric data. That is why we ask in the app for your express consent before the first check, and again when what you accepted changes.
• If you do not accept it: the check is a requirement to receive trips; without your consent, or if you do not complete it, you cannot go online.
• Who does it: the app takes images of your face with the front camera, and our own server compares them automatically with your profile photo or your identity verification. We do not send them to other providers.
• What we keep: the result of each check. The images are not kept, except those of a check with a doubtful result, which are kept encrypted for up to 30 days so that our team can review them, and are then deleted.
• Use: the images and results are used only to identify you and protect your account, never for commercial purposes, and we do not share them with anyone outside Viaje Rentable.
• Review and rights: if the result is doubtful, a person on our team reviews it. You can ask for a review or exercise your rights over this data by writing to contacto@viajerentable.com.ar.